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Abstract 

Description Logics (DLs) are a family of knowledge representation for- 
malisms mainly characterised by constructors to build complex concepts 
' and roles from atomic ones. Expressive role constructors are important 

, in many applications, but can be computationally problematical. We 

■ present an algorithm that decides satisfiability of the DL ACC extended 

with transitive and inverse roles, role hierarchies, and qualifying number 
C/3 . restrictions. Early experiments indicate that this algorithm is well-suited 

for implementation. Additionally, we show that ACC extended with just 
transitive and inverse roles is still in PSpace. Finally, we investigate the 
limits of decidability for this family of DLs. 
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1 Motivation 



Description Logics (DLs) are a well-known family of knowledge representation 
formalisms [DLNS96] . They are based on the notion of concepts (unary pred- 
icates, classes) and roles (binary relations), and are mainly characterised by 
constructors that allow complex concepts and roles to be built from atomic 
ones. Sound and complete algorithms for the interesting inference problems 
such as subsumption and satisfiability of concepts are known for a wide variety 
of DLs [SS91, DLNdN91, Sat96, DL96, CDL99]. 

"This paper appeared in the Proceedings of the 6th International Conference on Logic for 
Programming and Automated Reasoning (LPAR'99), number 1704 Lecture Notes in Artificial 
Intelligence, pages 161-180. Springer- Verlag, September 1999. 
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To be used in a specific application, the expressivity of the DL must be 
sufficient to describe relevant properties of objects in the application domain. 
For example, transitive roles (e.g. "ancestor") and inverse roles (e.g. "suc- 
cessor" / "predecessor" ) play an important role not only in the adequate repre- 
sentation of complex, aggregated objects [HS99], but also for reasoning with 
conceptual data models [CLN94]. Moreover, reasoning with respect to cyclic 
definitions is crucial for applying DLs to reasoning with database schemata 
[CDL98a]. 

The relevant inference problems for (extensions of) DLs that allow for tran- 
sitive and inverse roles are known to be decidable [DL96], and appropriate in- 
ference algorithms have been described [DM98], but their high degree of non- 
determinism appears to prohibit their use in realistic applications. This is 
mainly due to the fact that these algorithms can handle not just transitive 
roles but also the transitive closure of roles. It has been shown [Sat96] that 
restricting a DL to transitive roles can lead to a lower complexity, and that 
transitive roles (even when combined with role hierarchies) allow for algorithms 
that behave quite well in realistic applications [Hor98]. However, it remained to 
show that this is still true when inverse roles and qualifying number restrictions 
are also present. 

This paper extends our understanding of these issues in several directions. 
Firstly, we present an algorithm that decides satisfiability of ACC [SS91] (which 
can be seen as a notational variant of the multi modal logic K m ) extended with 
transitive and inverse roles, role hierarchies, and qualifying number restrictions, 
i.e., concepts of the form 3 hasChild Female) that allow the description 
of objects by restricting the number of objects of a given type they are related 
to via a certain role. The algorithm can also be used for checking satisfiability 
and subsumption with respect to general concept inclusion axioms (and thus 
cyclic definitions) because these axioms can be "internalised" . The absence of 
transitive closure leads to a lower degree of non-determinism, and experiments 
indicate that the algorithm is well-suited for implementation. 

Secondly, we show that ACC extended with both transitive and inverse roles 
is still in Pspace. The algorithm used to prove this rather surprising result 
introduces an enhanced blocking technique. In general, blocking is used to 
ensure termination of the algorithm in cases where it would otherwise be stuck 
in a loop. The enhanced blocking technique allows such cases to be detected 
earlier and should provide useful efficiency gains in implementations of this and 
more expressive DLs. 

Finally, we investigate the limits of decidability for this family of DLs, show- 
ing that relaxing the constraints placed on the kinds of roles allowed in number 
restrictions leads to the undecidability of all inference problems. 

Due to a lack of space we can only present selected proofs. For full details 
please refer to [HST98, HST99]. 
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2 Preliminaries 



In this section, we present the syntax and semantics of the various DLs that 
are investigated in subsequent sections. This includes the definition of inference 
problems (concept subsumption and satisfiability, and both of these problems 
with respect to terminologies) and how they are interrelated. 

The logics we will discuss are all based on an extension of the well known 
DL ACC [SS91] to include transitively closed primitive roles [Sat96]; we will 
call this logic S due to its relationship with the proposition (multi) modal logic 
S4( m ) [SchOl]. 1 This basic DL is then extended in a variety of ways — see Fig- 
ure 1 for an overview. 

Definition 2.1 

Let C be a set of concept names and R a set of role names with transitive 
role names R+ C R. The set of SZ-roles is R U {R~ \ R G R}. The set of 
5X-concepts is the smallest set such that every concept name is a concept, and, 
if C and D are concepts and R is an Sl-role, then (C l~l D), (C U D), (->C), 
(Vi?.C), and (3R.C) are also concepts. 

To avoid considering roles such as R~~, we define a function Inv on roles 
such that lnv(i?) = R~ if R is a role name, and lnv(i?) = S if R = S~ . We 
also define a function Trans which returns true iff R is a transitive role. More 
precisely, Trans(i?) = true iff R G R+ or lnv(i?) G R+. 

SHI is obtained from SI by allowing, additionally, for a set of role inclusion 
axioms of the form R C S, where R and S are two roles, each of which can be 
inverse. For a set of role inclusion axioms 1Z, 

TZ+ := (ftu{lnv(i2) C Inv(S) R E S G 11}, E ) 

is called a role hierarchy, where E is the transitive-reflexive closure of C over 
K U {lnv(i?) C Inv(S) R C S e 11}. 

STLIQ is obtained from SHI by allowing, additionally, for qualifying num- 
ber restrictions, i.e., for concepts of the form (Js n R C) and n R C), where 
R is a simple (possibly inverse) role and n is a non-negative integer. A role is 
called simple iff it is neither transitive nor has transitive sub-roles. 

SHIM is the restriction of SHIQ where qualifying number restrictions may 
only be of the form n R T) and n R T). In this case, we omit the symbol 
T and write n R) and n R) instead. 

An interpretation I = (A 1 , ■ x ) consists of a set A 1 , called the domain of I, 
and a valuation • I which maps every concept to a subset of A 1 and every role 
to a subset of A 1 x A x such that, for all concepts C, D, roles R, S, and non- 
negative integers n, the properties in Figure 1 are satisfied, where flM denotes 
the cardinality of a set M. An interpretation satisfies a role hierarchy 1Z + iff 
R x C S 1 for each R E S G 7Z + ; we denote this fact by I \= 1Z + and say that I 
is a model of 1Z + . 

1 The logic S has previously been called ACC R -i, but this becomes too cumbersome when 
adding letters to represent additional features. 
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Construct Name 


Syntax 


Semantics 




atomic concept 
universal concept 
atomic role 
transitive role 
conjunction 
disjunction 
negation 
exists restriction 
value restriction 


A 
T 
R 

R e R+ 
CUD 
CUD 

3R.C 
VR.C 


A x C A^ 
T x = A x 
R 1 C A 1 x A x 
R 1 = {R T )+ 

c I r\D I 

C I UD I 
A X \C X 
{x | 3y.(x, y) G R x and y G C x } 
{x Vy.{x, y) G i? x implies y G C x } 




role hierarchy 


RUS 


J? x C ^ 


W 


inverse role 


R~ 


{(x,y> | (y,x}e^} 


J 


number 
restrictions 


^nR 
^nR 


{x | G R 1 } > n} 
{x | t{y.(x,y) Gi? x } ^n} 


M 


qualifying 

number 

restrictions 


^nR.C 
^nR.C 


{x | jj{y.(x,y) G f? x and y E C 1 } ^ n} 
{x | G -R 1 and j/ G C x }< n} 


Q 



Figure 1 : Syntax and semantics of the ST family of DLs 



A concept C is called satisfiable with respect to a role hierarchy 1Z + iff there 
is some interpretation I such that 2 \= 1Z + and C 1 ^ 0. Such an interpretation 
is called a model of C w.r.t. TZ + . A concept D subsumes a concept C w.r.t. 
K+ (written C U n + D) iff C 1 C D 1 holds for each model 1 of K+ . For an 
interpretation 1, an individual x G A x is called an instance of a concept C iff 
x G C X . 

All DLs considered here are closed under negation, hence subsumption and 
(un)satisfiability w.r.t. role hierarchies can be reduced to each other: C U n + D 
iff C n ->D is unsatisfiablc w.r.t. 1Z + , and C is unsatisfiable w.r.t. 1Z + iff 
C ^=n+ A n f° r some concept name A. 

In [Baa91, Sch91, BBN+93], the internalisation of terminological axioms 
is introduced, a technique that reduces reasoning with respect to a (possibly 
cyclic) terminology to satisfiability of concepts. In [Hor98], we saw how role 
hierarchies can be used for this reduction. In the presence of inverse roles, this 
reduction must be slightly modified. 

Definition 2.2 

A terminology T is a Enite set of general concept inclusion axioms, T = {C\ C 
D\t ■ ■ ,C n U D n }, where C i: D- L are arbitrary STLIQ-concepts. An interpreta- 
tion X is said to he a model of T iff Cf C Df holds for all d C A G T. C is 
satisfiable with respect to T iff there is a model 1 of T with C x ^ 0. Finally, 
D subsumes C with respect to T iff for each model XofTwe have C 1 C D x . 

The following Lemma shows how general concept inclusion axioms can be 
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internalised using a "universal" role U, that is, a transitive super-role of all roles 
occurring in T and their respective inverses. 

Lemma 2.3 Let T be a terminology, 1Z a set of role inclusion axioms and C, D 
SHIQ- concepts and let 

Let U be a transitive role that does not occur in T, C, D, or 1Z. We set 

Tlu := Tl U {R C U, lnv(i?) C U \ R occurs in T, C, D, or 11}. 

Then C is satisfiable w.r.t. T and 1Z + iff C n C't n VC/.Cr is satisfiable w.r.t. 
TZy. Moreover, D subsumes C with respect to T andlZ + iff Cn^DnCrnVU.Cr 
is unsatisfiable w.r.t. TZy. 

The proof of Lemma 2.3 is similar to the ones that can be found in [Sch91, 
Baa91]. Most importantly, it must be shown that, (a) if a <SWZQ-concept C is 
satisfiable with respect to a terminology T and a role hierarchy TZ + , then C, T 
have a connected model, and (b) if y is reachable from x via a role path (possibly 
involving inverse roles), then (x, y) G U x . These are easy consequences of the 
semantics and the definition of U. 

Theorem 2.4 

Satisfiability and subsumption of SHIQ-concepts (resp. SHI -concepts) w.r.t. 
terminologies and role hierarchies are polynomially reducible to (un ) satisfiability 
of SHIQ-concepts (resp. SHT-concepts) w.r.t. role hierarchies. 



3 Reasoning for ST Logics 

In this section, we present two tableaux algorithms: the first decides satisfiability 
of <S7£T<2-concepts, and can be used for all SHXQ reasoning problems (see 
Theorem 2.4); the second decides satisfiability (and hence subsumption) of SX- 
concepts in Pspace. Please note that SHIN (and hence SHIQ) no longer 
has the finite model property: for example, the following concept, where R is 
a transitive super-role of F, is satisfiable, but each of its models has an infinite 
domain. 

-nC n 3F~.(C n s^lF) n VR-.{3F~.(C n <LF)) 

This concept requires the existence of an infinite i^-path, where the first 
clement on the path satisfies ->C while all other elements satisfy C n ^1F. 
This path cannot collapse into a cycle: (a) it cannot return to the first element 
because this element cannot satisfy both C and -iC; (b) it cannot return to any 
subsequent element on the path because then this node would not satisfy ^1F. 

The correctness of the algorithms we are presenting can be proved by show- 
ing that they create a tableau for a concept iff it is satisfiable. For ease of 
construction, we assume all concepts to be in negation normal form (NNF), 
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that is, negation occurs only in front of concept names. Any <S7iZQ-concept 
can easily be transformed to an equivalent one in NNF by pushing negations 
inwards [HNS90] ; with ~C we denote the NNF of ->C. For a concept C in NNF 
we dehne clos(C) as the smallest set of concepts that contains C and is closed 
under subconcepts and ~. Please note that size of clos(C) is linearly bounded 
by the size of C. 

Definition 3.1 

Let D be a STCIQ-concept in NNF, 1Z + a role hierarchy, and Hp the set of 
roles occurring in D and 1Z + together with their inverses. Then T — (S,£, £) 
is a tableau for D w.r.t. 1Z + iff S is a set of individuals, £> : S — ► 2 clos ^ D ^ maps 
each individual to a set of concepts, £ : Hp — > 2 s xS maps each role to a set 
of pairs of individuals, and there is some individual s€S such that D G 
Furthermore, for all s, t G S, C, C\,Ci G clos(D), and R,SG Rd, it holds that: 

1. ifC G £(s), then -.C £ L(s), 

2. if d n C 2 G £(s), then Ci G £(s) and C 2 G £(s), 

3. if Ci U C 2 G £(s), then Ci G £(s) or C 2 G L{s), 

4. ifVS.C G -C(s) and (s,t) G £(5), then C G £(t), 

5. if 3S.C G £<(s), then there is some t G S such that (s,t) G £(S') and 
C G £(t), 

6. ifVS.C G £(s) and (s,t) G E(R) for some R^S with Trans(.R), then 
VR.CeH{t), 

7. (x,y) G £(R) iff(y,x) G £(lnv(i2)), 

8. if (s,t) G £(i?) and R&S, then (s,t) G £(S), 

9. if « n 5 C) G £,(«), then (jS^s, C) n, 
10. if O nSC) 6 £,(«), then |S' T (s,C) ^ n, 

21. if (x n 5 C) G £(s) and (s,t) G £(5) then C* G £(t) or ~C G £(t), 

where we use X as a placeholder for both < and > and we define 

S T (s, C) := {t G S | (s, i) G £(5) and C G £(*)}. 

Tableaux for Si-concepts are defined analogously and must satisfy Proper- 
ties 1-7, where, due to the absence of a role hierarchy, E is the identity. 

Due to the close relationship between models and tableaux, the following 
lemma can be easily proved by induction. As a consequence, an algorithm that 
constructs (if possible) a tableau for an input concept is a decision procedure 
for satisfiability of concepts. 

Lemma 3.2 A SHIQ-concept (resp. Si-concept) D is satisfiable w.r.t. a role 
hierarchy 1Z + iff D has a tableau w.r.t. 1Z + . 
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3.1 Reasoning in SH1Q 

In the following, we give an algorithm that, given a SHI Q-concept D, decides 
the existence of a tableaux for D. We implicitly assume an arbitrary but fixed 
role hierarchy 1Z + . The tableaux algorithm works on a finite completion tree (a 
tree some of whose nodes correspond to individuals in the tableau, each node 
being labelled with a set of iSHXQ-conccpts), and employs a blocking technique 
[HS99] to guarantee termination: If a path contains two pairs of successive nodes 
that have pair-wise identical label and whose connecting edges have identical 
labels, then the path beyond the second pair is no longer expanded, it is said to 
be blocked. Blocked paths can be "unravelled" to construct an infinite tableau. 
The identical labels make sure that copies of the first pair and their descendants 
can be substituted for the second pair of nodes and their respective descendants. 

Definition 3.3 

A completion tree for a SHIQ-concept D is a tree where each node x of the 
tree is labelled with a set L(x) C clos(D) and each edge (x, y) is labelled with a 
set £j((x,y)) of (possibly inverse) roles occurring in clos(D); explicit inequalities 
between nodes of the tree are recorded in a binary relation ^ that is implicitly 
assumed to be symmetric. 

Given a completion tree, a node y is called an i?-successor of a node x iff y 
is a successor of x and S G L({x,y)) for some S with S EtR. A node y is called 
an i?-neighbour of x iff y is an R-successor of x, or if x is an lnv(f?) -successor 
of y. Predecessors and ancestors are defined as usual. 

A node is blocked iff it is directly or indirectly blocked. A node x is directly 
blocked iff none of its ancestors are blocked, and it has ancestors x' , y and y' 
such that 

1. x is a successor of x' and y is a successor of y' and 

2. L(x) = H(y) and L(x') — <C(y') and 

3. L((x',x))=my',y)). 

In this case we will say that y blocks x. Since this blocking technique involves 
pairs of nodes, it is called pair-wise blocking. 

A node y is indirectly blocked iff one of its ancestors is blocked, or it is 
a successor of a node x and Z({x,y)) = 0; the latter condition avoids wasted 
expansions after an application of the ^-rule. 

For a node x, L(x) is said to contain a clash iff {A, -*A} C L(x) or if, for 
some concept C, some role S, and some n G N: n S C) G Z(x) and there 
are n + 1 S -neighbours y n , . . . ,y n of x such that C G &(yi) and yi yj for 
all < i < j < n. A completion tree is called clash-free iff none of its nodes 
contains a clash; it is called complete iff none of the expansion rules in Figure 2 
is applicable. 

For a STilQ-conccpt D, the algorithm starts with a completion tree con- 
sisting of a single node x with L(x) = {D} and ^ = 0. It applies the expansion 
rules in Figure 2, stopping when a clash occurs, and answers "D is satishable" 
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ri-rule: 


if 1. 


Ci n C2 G -C(x), x is not indirectly blocked, and 




2. 


{Ci,C 2 }g£(aO 




then 


£(V) — > £(a;) U {Ci,C 2 } 


U-rule: 


if 1. 


Ci U C*2 G £j(x\ x is not indirectly blocked, and 




2. 


fCi C 2 i n£(V) = 




then 


£(a:) — > d(x) U {C} for some C £ {Ci, C 2 } 


3-rule: 


if 1. 


3S.C £ £>(#), a: is not blocked, and 




2. 


x has no S'-neighbour y with (7 £ 




then 


create a new node y with L({x,y)) = {5} and &(y) = {C} 


V-rule: 


if 1. 


\/S.C G -C(x), x is not indirectly blocked, and 




2. 


there is an 5*- neighbour y of x with C ^ £->{y) 




then 


\y / \y / l j 


V+-rulc: 


if 1. 


V6.C € f-j(x), x is not indirectly blocked, and 
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3. 


there is an 7?- neighbour y of x with Vi?.C ^ 




then 




choose-m\c: 


if 1. 


(txi n b C) € & (x), x is not indirectly blocked, and 




2. 


there is an 6-neignbour y oi x with {C, ~C| fl My) =V 




then 


My) — * My) u {^} f° r som ° e € {c, 


>-rule: 


if 1. 


n S C) € M^); £ is not blocked, and 




2. 


there are not n S'-neighbours j/i , . . . , y n of x with 






c g an d y» ^ yj for 1 < i < j < n 




then 


create n new nodes yi,...,y„ with L({x,yi)) = |i>|, 






MV0 = and Hi # yj for 1 < i < j < ra. 


<-rule: 


if 1. 


n S C) € a; is not indirectly blocked, and 




2. 


t)S' T (a;, C) > n and there are two S-neighbours y, z of x with 






C € L(y),C G £(z), y is not an ancestor of x, and not y z 




then 


1. £(z) — >■ t(z)u£(j) and 






2. if 2 is an ancestor of a; 






then &({z,x)) — > x}) U lnv(£((x, 






else £((x,z» — ■+ £((i,z))U£((i,j)) 






3. — 






4. Set it 7^ 2 for all m with u ^ y 



Figure 2: The complete tableaux expansion rules for SHTQ 



iff the completion rules can be applied in such a way that they yield a complete 
and clash-free completion tree. 

The soundness and completeness of the tableaux algorithm is an immediate 
consequence of Lemmas 3.2 and 3.4. 

Lemma 3.4 Let D be an SHTQ- concept. 

1. The tableaux algorithm terminates when started with D. 

2. If the expansion rules can be applied to D such that they yield a complete 
and clash-free completion tree, then D has a tableau. 
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3. If D has a tableau, then the expansion rules can be applied to D such that 
they yield a complete and clash-free completion tree. 

The proof can be found in the appendix. Here, we will only discuss the in- 
tuition behind the expansion rules and their correspondence to the constructors 
of SHXQ. Roughly speaking, 2 the completion tree is a partial description of a 
model whose individuals correspond to nodes, and whose interpretation of roles 
is taken from the edge labels. Since the completion tree is a tree, this would 
not yield a correct interpretation of transitive roles, and thus the interpretation 
of transitive roles is built via the transitive closure of the relations induced by 
the corresponding edge labels. 

The I - !-, U-, 3- and V-rules are the standard tableaux rules for ACC or the 
propositional modal logic K m . The V+-rule is the standard rule for ACC R + 
or the propositional modal logic S4 m extended to deal with role-hierarchies as 
follows. Assume a situation that satisfies the precondition of the V+-rulc, i.e., 
MS.C £ £<{x), and there is an i?-neighbour y of x with Trans(_R), and 
Vi?.C ^ £(?/)• If y has an i?-successor z, then, due to the transitivity of R, z is 
also an i?-successor of x. Since R\±S, it is also an S'-successor of x and hence 
must satisfy C. This is ensured by adding MR.C to L(z) 

The rules dealing with qualifying number restrictions work similarly to the 
rules given in [BBH96]. For a concept n R C) £ L(x), the ^-rule generates 
n ^-successors yi,-..,y n of x with C £ . To prevent the <-rule from 

indentifying the new nodes, it also sets j/j ^ yj for each 1 < i < j < n . 
Conversely, if n R C) £ h(x) and x has more than n R- neighbours that are 
labelled with C, then the <-rule chooses two of them that are not in ^ and 
merges them, together with the edges connecting them with x. The definition 
of a clash takes care of the situation where the ^ relation makes it impossible 
to merge any two i?-neighbours of x, while the c/ioose-rule ensures that all 
i?-neighbours of x are labelled with either C or ~C. Without this rule, the 
unsatisfiability of concepts like O 3 R A) n « 1 R B) n « 1 R -<B) would 
go undetected. The relation jl= is used to prevent infinite sequences of rule 
applications for contradicting number restrictions of the form n R C) and 

(to) R C), with n > m. Labelling edges with sets of roles allows a single 
node to be both an R and ^-successor of x even if R and S are not comparable 
with respect to E . 

The following theorem is an immediate consequence of Lemma 3.2 and 3.4, 
and Theorem 2.4. 

Theorem 3.5 

The tableaux algorithm is a decision procedure for the satishability and sub- 
sumption of SHXQ- concepts with respect to terminologies. 

2 For the following considerations, we employ a simpler view of the correspondence between 
completion trees and models, and need not bother with the path construction mentioned 
above. 
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3.2 A PSpace-algorithm for SI 



To obtain a (worst-case) optimal algorithm for SI, the SHIQ algorithm is mod- 
ified as follows, (a) Since SI does not allow for qualifying number restrictions 
the and c/ioose-rulc can be omitted. In the absence of the choose- 

rule we may assume all concepts appearing in labels to be in NNF from the 
(smaller) set of all subconcepts of D denoted by sub(D), and in the absence of 
role hierarchies, edge labels can be restricted to roles (instead of sets of roles). 
Due to the absence of number restrictions the logic still has the finite model 
property, and blocking no longer need involve two pairs of nodes with identical 
labels, but only two nodes with (originally) identical labels, (b) To obtain a 
PSpace algorithm, we employ a refined blocking strategy which further loosens 
this "identity" condition to a "similarity" condition. This is achieved by using 
a second label H for each node. In the following, we will describe and motivate 
this blocking technique; detailed proofs as well as an extension of this result to 
SIN can be found in [HST98]. 

Establishing a PSPACE-result for ST is not as straightforward as it might 
seem at a first glance. One problem is the presence of inverse roles which might 
lead to constraints propagating upwards in the tree. This is not compatible with 
the standard trace technique [SS91] that keeps only a single path in memory at 
the same time, because constraints propagating upwards in the tree may have 
an influence on paths that have already been visited and have been discarded 
from memory. There are at least two possibilities to overcome this problem: 
(1) by guessing which constraints might propagate upwards beforehand; (2) by 
a reset-restart extension of the trace technique described later in this section. 
Unfortunately, this is not the only problem. To apply either of these two tech- 
niques, it is also necessary to establish a polynomial bound on the length of 
paths in the completion tree. This is easily established for logics such as ACC 
that do not allow for transitive roles. For ACC with transitive roles (i.e., S), 
this bound is due to the fact that, for a node x to block a node y, it is sufficient 
that £j(y) C L(x). In the presence of inverse roles, we use a more sophisticated 
blocking technique to establish the polynomial bound. 

Definition 3.6 

A completion tree for an SI concept D is a tree where each node x of the tree 
is labelled with two sets ¥>(x) C L(x) C sub(D), and each edge (x, y) is labelled 
with a (possibly inverse) role L((x, y)) occurring in sub(D). 

R-neighbours, -successors, and -predecessors are defined as in Dehnition 3.3 
where, in the absence of role hierarchies, E is the identity on R. 

A node x is blocked iff x has a blocked ancestor y, or x has an ancestor y 
and a predecessor x' with L((x',x)) = S, and 

T,{x)CL(y) and L(x)/ Inv(S) = £(y)/ Inv(S), 

where &(x)/\m(S) = {Vlnv(S).C e £(&)}■ 

For a node x, £>(x) is said to contain a clash iff {A, ^A} C £,(#). A comple- 
tion tree to which none of the expansion rules given in Figure 3 is applicable is 
called complete. 
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n-rulc: 


if 1. 


Ci n C 2 € £(») and 




2. 






tllGll 


£01 > rfrUJ -f(7i (7ol 


U-rulc: 


if 1. 


d U C 2 € £(a;) and 




2. 


{Ci,c 2 }n£(» = 




tllGIl 


£01 > £01 ii 1(71 for- some (7 e= f(7i (7ol 


V-rulc: 


if 1. 


VS.C e L(x) and 




2. 


thprp is an .S'-mirpp^cvr 7/ of t with O f? 'Rf?/! 




then 


£ft/1 — > £(V) U IC1 and 






B^/l > Sfi; 1 ) I J 1(71 or 




2'. 


there is an S-predecessor y of a: with C L(y) 




then 


L(y)^L(y)l){C}. 


V+-rule: 


if 1. 


VS.C G £(a;) and Trans(S) and 




2. 


there is an S'-succ. y of x with VS.C ^ ®(y) 




then 


£(?/) — >L(y)U{VS.C} and 






B(») ^B(2/)U{VS.C7} or 




2'. 


there is an S-predecessor y of x with VS.C ^ £(y) 




then 


£(y) ^£(y)u{V5.C}. 


3-rule: 


if 1. 


35.C € &(x), x is not blocked and no other rule 






is applicable to any of its ancestors, and 




2. 


x has no S- neighbour y with C G £(y) 




then 


create a new node y with L({x,y}) — S and = ®(y) = {C} 



Figure 3: Tableaux expansion rules for ST 



For an ST-concept D, the algorithm starts with a completion tree consisting 
of a single node x with H(x) = Z(x) = {D}. It applies the expansion rules in 
Figure 3, stopping when a clash occurs, and answers "D is satishable" iff the 
completion rules can be applied in such a way that they yield a complete and 
clash-free completion tree. 

As for SHTQ, correctness of the algorithm can be proved by first showing 
that a iSZ-concept is satisfiable iff it has a tableau, and next proving the SX- 
analogue of Lemma 3.4, see [HST98]. 

Theorem 3.7 

The tableaux algorithm is a decision procedure for satisfiability and subsump- 
tion of Sl-concepts. 

Since blocking plays a major role both in the proof of Theorem 3.7 and 
especially in the following complexity considerations, we will discuss it here in 
more detail. Blocking guarantees the termination of the algorithm. For DLs 
such as A£C, termination is mainly due to the fact that the expansion rules can 
only add new concepts that are strictly smaller than the concept that triggered 
their application. 

For S this is no longer true: the V + -rule introduces new concepts that are the 
same size as the triggering concept. To ensure termination, nodes labelled with 
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a subset of the label of an ancestor are blocked. Since rules can be applied "top- 
down" (successors are only generated if no other rules are applicable, and the 
labels of inner nodes are never touched again) and subset-blocking is sufficient 
(i.e., for a node x to be blocked by an ancestor y, it is sufficient that £(x) C 
it is possible to give a polynomial bound on the length of paths. 

For ST, dynamic blocking was introduced in [HS99], i.e., blocks arc not 
established on a once-and-for-all basis, but established and broken dynamically. 
Moreover, blocks must be established on the basis of label equality, since value 
restrictions can now constrain predecessors as well as successors. Unfortunately, 
this may lead to completion trees with exponentially long paths because there 
are exponentially many possibilities to label sets on such a path. Due to the 
non-deterministic U-rule, these exponentially many sets may actually occur. 

This non-determinism is not problematical for S because disjunctions need 
not be completely decomposed to yield a subset-blocking situation. For an 
optimal ST algorithm, the additional label 23 was introduced to enable a sort 
of subset-blocking which is independent of the U-non-detcrminism. Intuitively, 
23 (x) is the restriction of £(x) to those non-decomposed concepts that x must 
satisfy, whereas £(x) contains boolean decompositions of these concepts as well 
as those that are imposed by value restrictions in descendants. If x is blocked 
by y, then all concepts in 23(x) are eventually decomposed in L(y). However, 
in order to substitute x by y, x's constraints on predecessors must be at least 
as strong as y's; this is taken care of by the second blocking condition. 

Let us consider a path Xq,X\, . . . ,x n where all edges are labelled R with 
Trans(_R), the only kind of path along which the length of the longest concept 
in the labels might not decrease. If no rules can be applied, then we have, for 
1 < i < n, 

L(xi + \)/ \rtv(R) C £(xj)/ lnv(i?) and 
S(a?i) C £(x i+ i) U {d} 

(where 3R.Ci € £<(xj) triggered the generation of Xj+i). This limits the number 
of different labels and guarantees blocking after a polynomial number of steps. 

Lemma 3.8 The paths of a completion tree for a concept D have a length of 
at most to 4 where m = \sub(D)\. 

Finally, a slight modification of the expansion rules given in Figure 3 yields 
a PSpace algorithm. This modification is necessary because the original algo- 
rithm must keep the whole completion tree in memory which needs exponential 
space even though the length of its paths is polynomially bounded. The original 
algorithm may not forget about branches because restrictions which are pushed 
upwards in the tree might make it necessary to revisit paths which have been 
considered before. A reset-restart mechanism solves this problem as follows: 

Whenever the V- or the V + -rule is applied to a node x and its predecessor y 
(Case 2' of these rules), we delete all successors of y from the completion tree 
(reset). While this makes it necessary to restart the generation of successors 
for y, it makes it possible to implement the algorithm in a depth-first manner 
which facilitates the re-use of space. 
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This modification does not affect the proof of soundness and completeness 
for the algorithm, but of course we have to re-prove termination [HST98] as it 
formerly relied on the fact that we never removed any nodes from the completion 
tree. Summing up we get: 

Theorem 3.9 

The modified algorithm is a PSpace decision procedure for satisfiability and 
subsumption of SX-concepts. 

4 The Undecidability of Unrestricted SHIN 

Like earlier DLs that combine a hierarchy of (transitive and non-transitive) roles 
with some form of number restrictions [HS99, HST98], SHXM only allows simple 
roles in restrictions, i.e. roles that are neither transitive nor have transitive 
subroles. The justification for this limitation has been partly on the grounds 
of a doubtful semantics (of transitive functional roles) and partly to simplify 
decision procedures. In this section, we will show that allowing arbitrary roles 
in SHIM number restrictions leads to undecidability. For convenience, we 
denote SHXM with arbitrary roles in number restrictions by STCIM + . 

The undecidability proof uses a reduction of the domino problem [Bcr66] 
adapted from [BS96]. This problem asks whether, for a set of domino types, 
there exists a tiling of an N 2 grid such that each point of the grid is covered 
with exactly one of the domino types, and adjacent dominoes are "compatible" 
with respect to some predefined criteria. 

Definition 4.1 

A domino system V = (D,H,V) consists of a non-empty set of domino types 
D = {Z?i, . . . , D n }, and of sets of horizontally and vertically matching pairs 
H C D x D and V C D x D. The problem is to determine if, for a given V, 
there exists a tiling of an N x N grid such that each point of the grid is covered 
with a domino type in D and all horizontally and vertically adjacent pairs of 
domino types are in H and V respectively i.e., a mapping (:NxN^fl such 
that for all m, n e N, (t(m, n),t(m + 1, n)) 6 H and {t(m, n), t(m, n + 1)) e V. 

This problem can be reduced to the satisfiability of SHXM + -concepts, and 
the undecidability of the domino problem implies undecidability of satisfiability 
of SHlM + -concepts. 

Ensuring that each point is associated with exactly one domino type and 
that a point and its neighbours satisfy the compatibility conditions induced by 
H and V is simple for most logics (via the introduction of concepts Cdi for 
domino types Di, and the use of value restrictions and boolean connectives), 
and applying such conditions throughout the grid is also simple in a logic such 
as SHXM + which can deal with arbitrary axioms. The crucial difficulty is 
representing the NxN grid using "horizontal" and "vertical" roles X and Y, 
and in particular forcing the coincidence of X o Y- and Y o X-successors. This 
can be accomplished in STLXM + using an alternating pattern of two horizontal 
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Xi X2 X\ 



Figure 4: Visualisation of the grid and role hierarchy. 

roles X\ and A 2 , and two vertical roles Y\ and Y~ 2 , with disjoint primitive 
concepts A, B, C, and D being used to identify points in the grid with different 
combinations of successors. The coincidence of X o Y and Y oX successors can 
then be enforced using number restrictions on transitive super-roles of each of 
the four possible combinations of X and Y roles. A visualisation of the resulting 
grid and a suitable role hierarchy is shown in Figure 4, where S® are transitive 
roles. 

The alternation of X and Y roles in the grid means that one of the transitive 
super-roles Sij connects each point (m, n) to the points (m + l,n), (m,n + 1) 
and (m + l,n + 1), and to no other points. A number restriction of the form 
^3Sij can thus be used to enforce the necessary coincidence of X o Y- and 
Y o X-successors. A complete specification of the grid is given by the following 
axioms: 

A C ->B n -iC n ->D n 3Xi.B n BYi.C n <3Sn, 
BCninnCnnfln 3A 2 .^ n 3Y X .D n <35 2 i, 
C c n n5 n -<D n 3Xi.£) n 3F 2 .A n ^3512, 
D c n ->B n -iC n 3A 2 .C n 3F 2 -B n <35 22 . 

It only remains to add axioms which encode the local compatibility conditions 
(as described in [BS96]) and to assert that A, B, C, and D are subsumed by 
the disjunction of all domino types to enforce the placement of a tile on each 
point of the grid. The concept A is now satisfiable w.r.t. the various axioms 
(which can be internalised as described in Lemma 2.3) iff there is a compatible 
tiling of the grid. 

5 Discussion 

A new DL system is being implemented based on the STilQ algorithm de- 
scribed in Section 3.1. Pending the completion of this project, the existing 
FaCT system [Hor98] has been modified to deal with inverse roles using the 
STLIQ blocking strategy, giving a DL which is equivalent to STCI extended 
with functional roles [HS99]; we will refer to this DL as SHIT and to the 
modified FaCT system as I-FaCT. 
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I-FaCT has been used to conduct some initial experiments with a terminol- 
ogy representing (fragments of) database schemata and inter schema assertions 
from a data warehousing application [CDL+98] (a slightly simplified version of 
the proposed encoding was used to generate SUTJ 7 terminologies). I-FaCT is 
able to classify this terminology which contains 19 concepts and 42 axioms, in 
less than 0.1s of (266MHz Pentium) CPU time. In contrast, eliminating inverse 
roles using an embedding technique [CDR98] gives an equisatisfiable FaCT ter- 
minology with an additional 84 axioms, but one which FaCT is unable to classify 
in 12 hours of CPU time. 

An extension of the embedding technique can be used to eliminate number 
restrictions [DL95], but requires a target logic which supports the transitive 
closure of roles, i.e., converse-PDL. The even larger number of axioms which 
this embedding would introduce makes it unlikely that tractable reasoning could 
be performed on the resulting terminology. Moreover, we are not aware of any 
algorithm for converse-P'DL which does not employ a so-called cut rule [DM98] , 
the application of which introduces considerable additional non-determinism. 
It seems inevitable that this would lead to a further degradation in empirical 
tractability. 

As far as complexity is concerned, we have already been successful in ex- 
tending the PSPACE-result for SI to STM [HST98]. Currently we are working 
on an extension of this result to S1Q combining the techniques from this paper 
with those presented in [Tob99] . 
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Appendix 

In this appendix we present the proof of Lemma 3.4, which is repeated here for 
easier reference. 

Lemma. Let D be an SHI Q- concept. 

1. (Termination) The tableaux algorithm terminates when started with D. 

2. ( Soundness ) If the expansion rules can be applied to D such that they yield 
a complete and clash-free completion tree, then D has a tableau. 

3. (Completeness) If D has a tableau, then the expansion rules can be applied 
to D such that they yield a complete and clash-free completion tree. 



(Termination) Let m = \clos(D)\, k = \Rd\, and n max the maximum n 
that occurs in a concept of the form (txi n S C) £ clos(D). Termination is a 
consequence of the following properties of the expansion rules: 

• The expansion rules never remove nodes from the tree or concepts from 
node labels. Edge labels can only be changed by the ^-rule which either 
expands them or sets them to 0; in the latter case the node below the 
0-labelled edge is blocked and this block is never broken. 

• Each successor of a node x is the result of the application of the 3-rule 
or the ^-rule to x. For a node x, each concept in L(x) can trigger the 
generation of successors at most once. 

For the 3-rule, if a successor y of x was generated for a concept 3S.C £ 
and later L((x,y)) is set to by the <-rule, then there is some 
S- neighbour z of x with C £ Z(z). 

For the ^-rule, if yi, . . . , y n were generated by the ^-rulc for n S C) £ 
L(x), then yi yj holds for all 1 < i < j < n. This implies that there are 
always n S'-neighbours y[, . . . , y' n of x with C £ L(y' i ) and y[ jl= y'- for all 
1 < i < j < n, since the ^-rule never merges two nodes y[, y'j with y[ y'j, 
and, whenever an application of the <-rule sets £((x, to 0, there is 
some S'-neighbour z of x which "inherits" both C and all inequalities from 

v'i- 

Since clos(D) contains a total of at most m 3R.C and n S C) concepts, 
the out-degree of the tree is bounded by m ■ n max . 

• Nodes are labelled with non-empty subsets of clos(D) and edges with 
subsets of Rd, so there are at most 2 2mk different possible labellings for 
a pair of nodes and an edge. Therefore, if a path p is of length at least 
2 2mk , then from the pair- wise blocking condition there must be two nodes 
x,y on p such that x is directly blocked by y. Furthermore, if a node 
was generated at distance I from the root node, it always remains at this 
distance, and thus paths are not curled up or shortened. Since a path 
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on which nodes are blocked cannot become longer, paths are of length at 
most 2 2mn . ■ 



(Soundness) Let T be a complete and clash-free completion tree. A path is 
a sequence of pairs of nodes of T of the form p = [|f, • • • , §?-]• For such a path 
we define Tailfp) := x n and Tail' (p) := x'. With \p\ x ? +1 ] we denote the path 
Rt, . . . , 2ji±ll. The set Paths(T) is defined inductively as follows: 

• For the root node x of T, [fa] G Paths(T), and 

• For a path p G Paths(T) and a node z in T: 

— if z is a successor of Tail(p) and z is not blocked, then [p||] G 
Paths(T), or 

— if, for some node y in T, y is a successor of Tail(p) and z blocks y, 
then [p||] G Paths(T). 

Please note that, due to the construction of Paths, for p G Paths(T) with 
p = b'lp-], we have that x is not blocked, x' is blocked iff x ^ x', and x' is 
never indirectly blocked. Furthermore, L(x) = L(x') holds. 

Now we can define a tableau T = (S, L, £) with: 

S = Paths(T) 
L(p) = L(Tb\\( P )) 

£(R) = {(p, q) e S x S I Either q = [p\^] and 

x' is an i?-successor of Tail(p) 
or p= [q\fr] and 

x' is an lnv(i?)-successor of Ta i I (g) } . 

Claim: T is a tableau for D with respect to 1Z + . 

We show that T satisfies all the properties from Definition 3.1. 

• D G £([f£]) since D e L(x ). 

• Property 1 holds because T is clash-free; Properties 2,3 hold because 
Tail(p) is not blocked and T is complete. 

• Property 4: Assume VS.C G £(p) and (p,g) G £(S). If <? = [p|^], 
then .t' is an S'-successor of Tail(p) and thus C G (because the V- 
rule is not applicable). Since £j(q) = L(x) = L(x'), we have C G ^(g). If 
p = kip]; then x' is an lnv(S')-successor of Tail(q) and thus C G XL (Tail (</)) 
(because x' is not indirectly blocked and the V-rule is not applicable), 
hence C G £(g). 

• Property 5: Assume 3S.C G £>(p). Define x := Tail(p). In T there is an 
S- neighbour y of x with C G £(y), because the 3-rule is not applicable. 
There are two possibilities: 
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— y is a successor of x in T. If y is not blocked, then q := [p\^] £ S 
and (p, q) £ £(5) as well as C £ £(<?)■ If 2/ is blocked by some node 
z in T, then q := [p||] £ S. 

— y is a predecessor of ir. Again, there are two possibilities: 

* p is of the form p — [q\fr\ with Tail(g) = y. 

* p is of the form p = [q\-^r] with Tail (g) = u y. x only has 
one predecessor in T, hence u is not the predecessor of x. This 
implies x ^ x', x blocks x' in T, and u is the predecessor of x' 
due to the construction of Paths. Together with the definition of 
the blocking condition, this implies x')) = £>((y, x)) as well 
as L(u) = L(y) due to the pair- wise blocking condition. 

In all three cases, (p, q) £ £(S) and C £ &(q). 

Property 6: Assume VS.C £ L(p), (p,q) £ E(R) for some R&S with 
Trans(_R). If q = \p\-p-], then x' is an i?-successor of Tail(p) and thus 
VR.C £ L(x') (because otherwise the V+-rule would be applicable). From 
L(q) = C(x) = H{x') it follows that MR.C £ L(q). If p = [q\§], then x' 
is an lnv(5')-successor of Tail (q) and hence Ta\\(q) is an i?-neighbour of x' . 
Because x' is not indirectly blocked, this implies MR.C £ £(Tail(g)) and 
hence VR.C £ L(q). 

Property 11: Assume (x n S C) £ Up), (p,q) £ £(5). If q = ], 
then x' is an S'-successor of Tail(p) and thus {C,~C} fl U x ') ^ (since 
the cftoose-rule is not applicable). Since £>((?) = H(x) — Ux'), we have 
{C, ~ C} nL(q) 7^0. lfp= [q\-p], then x' is an lnv(S)-successor of Tail(q) 
and thus {C, ~C} fl L(Ta\\(q)) ^ (since x' is not indirectly blocked and 
the c/ioose-rule is not applicable), hence {C, ~C} n L(q) ^ 0. 

Assume Property 9 is violated. Hence there is some p £ S with (sC 
nSC)£L{p) and $S T {p, C) > n. We show that this implies |jS T (Tail(p), C) 
n, in contradiction of either the clash-freeness or completeness of T. De- 
fine x := Tail(p) and P := S T (p,C). Due to the assumption, we have 
flP > n. We distinguish two cases: 

— P contains only paths of the form q = [p\y]- We claim that the 
function Tail' is injective on P. Assume that there are two paths 
qi,qi £ P with q\ ^ q^ and Tail' (gi ) = Tail'^) = y' ■ Then q\ is 
of the form q\ — \p\(yi,y')\ and q2 is of the form qi = [p\^r] with 
yi 7^ Vi- If y' is not blocked in T, then y\ = y' = yi, contradicting 
V\ ^ yi- If y' is blocked in T, then both yi and yi block y', which 
implies j/i = yi, again a contradiction. 

Since Tail' is injective on P, it holds that (JP = ftTail'(P). Also for 
each y' £ Tail'(P), y' is an 5-successor of x and C £ U,y')- This 
implies j}<S' T (x, C) > n. 
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— P contains a path q where p is of the form p — [q\-p]- Obviously, 
P may only contain one such path. As in the previous case, Tail' is 
an injective function on the set P' := P \ {q}, each y' G Tail'(P') is 
an S-successor of x and C G for each y' G Tail'(P'). To show 
that indeed §S T (x, C) > n holds, we have to prove the existence of 
a further S-neighbour u of x with C G L(u) and u ^ Tail'(P'). This 
will be "supplied" by z := Ta'\\(q). Wc distinguish two cases: 

* x — x' . Hence x is not blocked. This implies that x is an Inv(S)- 
successor of z in T. Since Tail'(P') contains only successors of 
x, we have that z Tail'(P') and, by construction, z is an S'- 
neighbour of x with C G £(z). 

* x ^ x'. This implies that x' is blocked in T by x and that x' is 
an lnv(S)-successor of z in T. The definition of pairwise-blocking 
implies that x is an lnv(S)-successor of some node u in T with 
L{u) = H(z). Again, since Tail'(P') contains only successors 
of x we have that u £ Tail'(P') and, by construction, u is an 
S'-neighbour of x and C G L(u). 

• Property 10: Assume n S C) G £(p). Completeness of T implies 
that there exist n individuals y\ , . . . , y n in T such that each is an S'- 
neighbour of Tail(p) and C G &(yi)- We claim that, for each of these 
individuals, there is a path qi such that {p,qi) G £(S), C G &(qi), and 
qi ^ qj for all 1 < i < j < n. Obviously, this implies j}S T (p, C) ^ n. For 
each yi there are three possibilities: 

— yi is an S-successor of x and yi is not blocked in T. Then = [p\^\ 
is a path with the desired properties. 

— yi is an S-successor of x and yi is blocked in T by some node z. Then 
1i = [p\f~] i s the path with the desired properties. Since the same 
z may block several of the yjS, it is indeed necessary to include yi 
explicitly into the path to make them distinct. 

— x is an lnv(S)-successor of yi. There may be at most one such yi. 
This implies that p is of the form p = [q\jj] with Tail(g) = yi. Again, 
q has the desired properties and, obviously, q is distinct from all other 
paths qj. 

• Property 7 is satisfied due to the symmetric definition of £. Property 
8 is satisfied due to the definition of i?-successor that takes into account 
the role hierarchy E . ■ 



(Completeness) Let T = (S,£,£) be a tableau for D w.r.t. 1Z + . We use 
this tableau to guide the application of the non-deterministic rules. To do this, 
we will inductively define a function n, mapping the individuals of the tree T 
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to S such that, for each x, y in T: 



L(x) C L(ir(x)) 

if y is an S-neighbour of x, then (w(x),ir(y)) G £(S) 
x y implies ir(x) ^ ir(y) 




CLAIM: Let T be a completion-tree and n a function that satisfies (*). If a 
rule is applicable to T then the rule is applicable to T in a way that yields a 
completion-tree T' and an extension of tt that satisfy (*). 

Let T be a completion-tree and tt be a function that satisfies (*). We have to 
consider the various rules. 

• The n-rule: If Ci n C 2 £ Z(x), then dnC 2 G &(n(x)). This implies 
Ci,C2 G L(ir(x)) due to Property 2 from Definition 3.1, and hence the 
rule can be applied without violating (*). 

• The U-rule: If C x U C 2 G H(x), then C\ U C 2 G £(7r(a;)). Since T is a 
tableau, Property 3 from Definition 3.1 implies {Ci,C2} n L(tt(x)) ^ 0. 
Hence the U-rule can add a concept E G {Ci,C2} to L(x) such that 
£(a;) C H(tt(x)) holds. 

• The 3-rule: If 3S.C G £(x), then 3S.C G £(7r(a;)) and, since T is a 
tableau, Property 5 of Definition 3.1 implies that there is an element 
i € S such that (ir(x),t) G £(5) and C G &{t). The application of the 
3-rule generates a new variable y with L((x,y) = {S} and L(y) = {C}. 
Hence we set tt := w[y t] which yields a function that satisfies (*) for 
the modified tree. 

• The V-rule: If VS.C G H(x), then VS.C G £(tt(x)), and if y is an S'- 
neighbour of x, then also (Tr(x),Tr(y)) G £(5*) due to (*). Since T is a 
tableau, Property 4 of Definition 3.1 implies C G £j(ir(y)) and hence the 
V-rule can be applied without violating (*). 

• The V + -rule: If VS.C G £>(a;), then VS.C G £(7r(x)), and if there is some 
R [± S with Trans(i?) and y is an i?-neighbour of x, then also (tt(x), ir(y)) G 
£(i?) due to (*). Since T is a tableau, Property 6 of Definition 3.1 implies 
VR.C G £(7r(j/)) and hence the V + -rule can be applied without violating 
(*)■ 

• The choose-rule: If (ix n S C) G £(x), then (cx n S C) G £(*7r(x)), 
and, if there is an S'-neighbour y of x, then (7r(x), 7r(y)) G £(S) due to 
(*). Since T is a tableau, Property 11 of Definition 3.1 implies {C, ^C} D 
L(ir(y) ^ 0. Hence the c/ioose-rule can add an appropriate concept E G 
{C, ~C} to £(x) such that £(y) C £(tt(?/)) holds. 

• The >rule: If (> n S C) G £(x), then (^ n S C) G £(tt(x)). Since 
T is a tableau, Property 10 of Definition 3.1 implies §S t (tt(x), C) ^ n. 
Hence there are individuals t\,...,t n G S such that (n(x),ti) G £(S), 
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C G £j{U), and t{ 7^ tj for 1 < i < j < n. The ^-rule generates n new 
nodes y\, . . . , y n . By setting ir :— ir[yi 1— > t\,- ■ -y n 1— > £„], one obtains a 
function 7r that satisfies (*) for the modified tree. 

• The s^-rule: ff n S C) G £(a;), then n S C) G £(tt(o;)). Since 
T is a tableau, Property 9 of Definition 3.1 implies §S t (tt(x), C) ^ n. 
If the ^-rule is applicable, we have $S T (x,C) > n, which implies that 
there are at least n + 1 S- neighbours y 0} ■ ■ ■ , y n of x such that C G 
Thus, there must be two nodes y, z G {yoj • • • , Un} such that 7r(y) = ir(z) 
(because otherwise §S T (Tr(x), C) > n would hold). From ir(y) = ir(z) we 
have that y ^ z cannot hold because of (*), and y, z can be chosen such 
that y is not an ancestor of z. Hence the ^-rule can be applied without 
violating (*). 

Why does this claim yield the completeness of the tableaux algorithm? For 
the initial completion-tree consisting of a single node xq with £j(xq) = {D} and 
f = 6 wc can give a function ir that satisfies (*) by setting ir(xo) := so for some 
s G S with D G £j(sq) (such an so exists since T is a tableau for D). Whenever 
a rule is applicable to T, it can be applied in a way that maintains (*), and, 
since the algorithm terminates, we have that any sequence of rule applications 
must terminate. Properties (*) imply that any tree T generated by these rule- 
applications must be clash-free as there are only two possibilities for a clash, 
and it is easy to see that neither of these can hold in T: 

• T cannot contain a node x such that {C, -iC} G L(x) because L(x) C 
£j(n(x)) and hence Property 1 of Definition 3.1 would be violated for 
tt(x). 

• T cannot contain a node x with (^ n S C) G b(x) and n+ 1 S'-neighbours 
yo,.-.y n OI x with C G &(yi) and t/j ^ yj for < i < j < n be- 
cause (^ n S C) G £j(7t(x)), and, since yi ^ yj implies ir{yi) 7^ ^{Uj), 
§S t (tt(x), C) > n, in contradiction to Property 9 of Definition 3.1. ■ 
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